Control system, moving body, control method, and computer-readable storage medium for controlling an update of the update program

Abstract

A control system includes a moving body control unit configured to control a moving body, an update control unit configured to control reception of an update program of the moving body control unit from an external device and control update of the moving body control unit by the update program, and a determination unit configured to determine whether the moving body is refueled during a time until a predetermined time elapses before the update of the moving body control unit by the update program is started. When the determination unit determines that the moving body is refueled, the update control unit stops starting of the update of the moving body control unit by the update program.

What is claimed is: 
     
       1. A control system comprising:
 an ECU (Electronic Control Unit) that controls a moving body; and 
 a processor configured to control reception of an update program of the ECU from an external device, and to control update of the ECU by the update program; wherein 
 the processor is further configured to 
 determine whether the moving body is refueled during a time until a predetermined time elapses before the update of the ECU by the update program is started, 
 stop starting of the update of the ECU by the update program when it is determined that the moving body is refueled, 
 control obtainment of a user instruction to not execute the update of the ECU by the update program during the time until the predetermined time elapses, and 
 start the update of the ECU by the update program when the user instruction is not obtained and it is determined that the moving body is not refueled. 
 
     
     
       2. The control system according to  claim 1 , wherein the processor is further configured to
 control notification to a user that relates to the update of the ECU, wherein 
 after the notification has been executed to the user, the processor is further configured to obtain the user instruction during the time until the predetermined time elapses, and 
 after the notification has been executed to the user, the processor is further configured to start the update of the ECU by the update program when the user instruction is not obtained during the time until the predetermined time elapses and it is determined that the moving body is not refueled. 
 
     
     
       3. The control system according to  claim 2 , wherein
 the predetermined time is 30 seconds or more and 600 seconds or less. 
 
     
     
       4. The control system according to  claim 3 , wherein
 the predetermined time is 300 seconds or less. 
 
     
     
       5. The control system according to  claim 2 , wherein
 the notification to the user includes a notification for making a user select whether to execute the update of the ECU, and 
 the processor is further configured to start the update of the ECU by the update program before the predetermined time elapses when a user instruction to execute the update of the ECU is obtained. 
 
     
     
       6. The control system according to  claim 1 , wherein
 the processor is further configured to determine that the moving body is refueled when a storage amount of fuel in the moving body increases. 
 
     
     
       7. The control system according to  claim 1 , wherein
 the processor is further configured to determine that the moving body is refueled when a refueling port of the moving body is opened. 
 
     
     
       8. The control system according to  claim 1 , wherein
 the processor is further configured to determine that the moving body is refueled when the moving body exists in a refueling facility. 
 
     
     
       9. The control system according to  claim 3 , wherein
 the notification to the user includes a notification for making a user select whether to execute the update of the ECU, and 
 the processor is further configured to start the update of the ECU by the update program before the predetermined time elapses when a user instruction to execute the update of the ECU is obtained. 
 
     
     
       10. The control system according to  claim 2 , wherein
 the processor is further configured to determine that the moving body is refueled when a storage amount of fuel in the moving body increases. 
 
     
     
       11. The control system according to  claim 2 , wherein
 the processor is further configured to determine that the moving body is refueled when a refueling port of the moving body is opened. 
 
     
     
       12. The control system according to  claim 2 , wherein
 the processor is further configured to determine that the moving body is refueled when the moving body exists in a refueling facility. 
 
     
     
       13. A moving body comprising:
 the control system according to  claim 1 . 
 
     
     
       14. The moving body according to  claim 13 , wherein
 the moving body is a vehicle. 
 
     
     
       15. A control method comprising:
 receiving an update program of a moving body controller control unit configured to control a moving body from an external device; 
 determining whether the moving body is refueled during a time until a predetermined time elapses before an update of the moving body control unit by the update program is started; 
 stopping starting of the update of the moving body control unit by the update program when it is determined that the moving body is refueled, 
 controlling obtainment of a user instruction to not execute the update of the moving body controller by the update program during the time until the predetermined time elapses; and 
 starting the update of the moving body controller by the update program when the user instruction is not obtained and it is determined that the moving body is not refueled. 
 
     
     
       16. A non-temporary computer-readable storage medium having stored thereon a program that causes a computer to function as:
 a moving body control unit configured to control a moving body; 
 an update control unit configured to control reception of an update program of the moving body control unit from an external device and controlling update of the moving body control unit by the update program; 
 a determination unit configured to determine whether the moving body is refueled during a time until a predetermined time elapses before the update of the moving body control unit by the update program is started; and 
 an instruction obtainment control unit configured to control obtainment of a user instruction to not execute the update of the moving body control unit by the update program during the time until the predetermined time elapses, wherein 
 by the program, the update control unit is configured to stop the start of the update of the moving body control unit by the update program when the determination unit determines that the moving body is refueled, and 
 the update control unit is configured to start the update of the moving body control unit by the update program when the user instruction is not obtained and the determination unit determines that the moving body is not refueled.